$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: 19KrnPt/7VDB4A7Vd8Wwyc9IW7QAFku6oGmrqlBTrzg= Subject key identifier: 97:C4:E8:7C:F7:03:BC:C9:2A:3D:D9:9B:46:DA:14:1F:8E:33:A8:D0 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 2F31D30B53BAA2D12EBFD007F92A3C7608F426C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0301 Signing time: Sat 14 Jun 2025 14:00:49 +0000 Manifest this update: Sat 14 Jun 2025 13:55:49 +0000 Manifest next update: Wed 18 Jun 2025 00:54:49 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) 2: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: bAHViEmoHUCnVGo4i4Yichrvgno6ViMqMjczmPmHhwE=) 4: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:31:d3:0b:53:ba:a2:d1:2e:bf:d0:07:f9:2a:3c:76:08:f4:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Jun 14 13:55:49 2025 GMT Not After : Jun 18 00:54:49 2025 GMT Subject: CN=97C4E87CF703BCC92A3DD99B46DA141F8E33A8D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:88:16:0a:1c:9a:3f:38:72:14:51:f3:bd: c0:72:02:f2:bd:aa:41:37:37:4d:8b:64:17:89:af: 80:57:17:0b:09:1b:8d:d6:b8:49:10:59:2c:70:50: 37:cc:32:d3:20:8c:eb:df:f9:bb:ec:eb:b5:e6:88: d5:1c:48:46:19:b7:ce:ce:fd:5c:9c:90:d9:10:21: 4f:84:14:2c:93:95:85:32:9b:62:1c:3c:48:ab:51: 19:e8:35:e4:12:41:26:5d:24:e7:e9:37:8a:e5:47: ff:b4:9b:e3:3b:c6:db:af:f4:a7:02:ca:10:7c:8f: 64:83:bf:12:cf:11:77:7c:3c:5b:b9:da:b4:b7:3c: 11:29:c7:a6:cf:32:b7:c6:22:b0:65:68:6b:f2:07: b6:d8:b2:eb:c2:b0:04:78:69:c5:52:4a:63:3f:ca: fc:cd:88:99:16:3e:95:06:a5:1d:6d:1d:cd:dc:4a: 32:a8:20:e7:33:02:0c:c7:66:d2:cd:02:62:50:7d: f9:dd:61:7f:6a:75:1f:3e:bc:6f:db:d1:96:8d:69: 06:ac:12:af:8b:46:46:d7:c0:1f:ed:d5:81:84:54: de:c0:b0:83:36:35:cc:48:b7:02:d3:00:ba:20:63: 38:ac:ea:18:d6:b9:2a:c2:ed:ff:34:05:62:05:44: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C4:E8:7C:F7:03:BC:C9:2A:3D:D9:9B:46:DA:14:1F:8E:33:A8:D0 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:d6:eb:8b:c2:0e:01:1a:d5:79:c9:f9:be:c1:18:9b:98:2f: 5f:74:ec:ba:ce:68:3a:a9:b9:83:16:9e:43:dc:b0:35:d3:f7: 87:cb:7a:14:c0:3a:39:57:87:5c:ed:15:43:f9:f8:3a:51:2b: 7f:34:14:0d:d6:e5:03:96:8f:30:91:85:da:5b:52:7b:72:d6: 05:ca:b2:8b:17:9d:96:55:ee:6a:a6:11:05:61:c3:18:cc:ac: 64:a6:b8:af:5a:fb:be:f6:0f:e6:13:ea:ce:61:b1:28:b2:1b: 5f:35:dd:ed:9a:98:b9:02:ca:5e:09:88:49:dc:af:f2:7c:9a: 5d:45:e3:b0:60:27:19:c1:2f:d8:2d:1d:a1:18:c8:60:2b:c9: 76:6f:02:26:a2:51:2d:8c:c0:7f:c0:21:37:59:fe:fe:ec:be: 8c:b7:52:de:7f:5b:d5:39:41:a7:00:02:47:fd:9d:cc:26:af: 7a:18:f8:ff:95:28:da:7a:96:12:e5:9f:b5:7f:d1:19:6e:ff: 8b:ea:fd:58:ce:c8:05:3d:98:b5:ba:3a:68:0e:0b:3b:03:24: 67:d5:4b:89:af:e4:88:d5:89:d1:ca:fe:a9:fc:72:2f:bf:db: 87:4e:9e:0f:66:15:69:95:fd:04:e1:42:d9:3f:12:23:af:45: d1:ac:0f:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzHTC1O6otEuv9AH+So8dgj0JsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTA2MTQxMzU1NDlaFw0yNTA2MTgwMDU0NDlaMDMxMTAvBgNV BAMTKDk3QzRFODdDRjcwM0JDQzkyQTNERDk5QjQ2REExNDFGOEUzM0E4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTIgWChyaPzhyFFHzvcByAvK9 qkE3N02LZBeJr4BXFwsJG43WuEkQWSxwUDfMMtMgjOvf+bvs67XmiNUcSEYZt87O /VyckNkQIU+EFCyTlYUym2IcPEirURnoNeQSQSZdJOfpN4rlR/+0m+M7xtuv9KcC yhB8j2SDvxLPEXd8PFu52rS3PBEpx6bPMrfGIrBlaGvyB7bYsuvCsAR4acVSSmM/ yvzNiJkWPpUGpR1tHc3cSjKoIOczAgzHZtLNAmJQffndYX9qdR8+vG/b0ZaNaQas Eq+LRkbXwB/t1YGEVN7AsIM2NcxItwLTALogYzis6hjWuSrC7f80BWIFRG63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl8TofPcDvMkqPdmbRtoUH44zqNAwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/W64vCDgEa1XnJ+b7BGJuYL1907LrOaDqp uYMWnkPcsDXT94fLehTAOjlXh1ztFUP5+DpRK380FA3W5QOWjzCRhdpbUnty1gXK sosXnZZV7mqmEQVhwxjMrGSmuK9a+772D+YT6s5hsSiyG1813e2amLkCyl4JiEnc r/J8ml1F47BgJxnBL9gtHaEYyGAryXZvAiaiUS2MwH/AITdZ/v7svoy3Ut5/W9U5 QacAAkf9ncwmr3oY+P+VKNp6lhLln7V/0Rlu/4vq/VjOyAU9mLW6OmgOCzsDJGfV S4mv5IjVidHK/qn8ci+/24dOng9mFWmV/QThQtk/EiOvRdGsDwI= -----END CERTIFICATE-----Generated at Mon Jun 16 18:17:09 2025 by rpki-client